Description
HP Discovery & Dependency Mapping Inventory (DDMI) 7.50, 7.51, 7.60, 7.61, 7.70, and 9.30 launches the Windows SNMP service with its default configuration, which allows remote attackers to obtain potentially sensitive information or have unspecified other impact by leveraging the public read community.
Affected products
- HP / discovery&dependency_mapping_inventory7.50 – 7.50
- HP / discovery&dependency_mapping_inventory7.51 – 7.51
- HP / discovery&dependency_mapping_inventory7.60 – 7.60
- HP / discovery&dependency_mapping_inventory7.61 – 7.61
- HP / discovery&dependency_mapping_inventory7.70 – 7.70
- HP / discovery&dependency_mapping_inventory9.30 – 9.30
References
- MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/66242
- MISChttp://securitytracker.com/id?1025239
- MISChttp://securityreason.com/securityalert/8163
- MAILING_LISThttp://marc.info/?l=bugtraq&m=130082163516878&w=2
- MAILING_LISThttp://marc.info/?l=bugtraq&m=130082163516878&w=2
- VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2011/0755
- MISChttp://www.securityfocus.com/bid/46981